$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft File: nmoKpDnP40ewT3RoQKbkNMUJsac.mft (raw, json) Hash identifier: qi5TyrHdslFpDbrA2R95KPk+0TSjVCNPZYsmEHAQ+zw= Subject key identifier: F2:B6:F9:74:7D:AD:5C:DE:91:3D:6B:29:5C:33:CB:2D:80:96:84:0B Authority key identifier: 9E:6A:0A:A4:39:CF:E3:47:B0:4F:74:68:40:A6:E4:34:C5:09:B1:A7 Certificate issuer: /CN=A914DC56/serialNumber=9E6A0AA439CFE347B04F746840A6E434C509B1A7 Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft Manifest number: 0102 Signing time: Sat 15 Feb 2025 06:08:26 +0000 Manifest this update: Sat 15 Feb 2025 06:08:25 +0000 Manifest next update: Sat 22 Feb 2025 06:08:24 +0000 Files and hashes: 1: nmoKpDnP40ewT3RoQKbkNMUJsac.crl (hash: 3xZhSHRf4XUXdx0giCuoahb+AaUzRTHK5+5iyphBaKY=) 2: 11A843B467D811EEA0543B5CC4F9AE02.roa (hash: JGrxdfcTXN7WXmiB33mKDnWSPFdrh+A/TvrelqjBL5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.crl rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DC56 Validity Not Before: Feb 15 06:08:25 2025 GMT Not After : Feb 22 06:08:24 2025 GMT Subject: CN=67b02f59-3f78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0b:3f:c6:b9:92:76:64:77:d1:f2:35:d4:16: 7b:42:4b:1b:27:a8:1e:4c:4f:42:75:bc:58:3b:3d: 5b:e3:94:cf:13:74:42:b7:7b:fc:b0:50:76:38:98: 24:be:14:01:2e:e6:ce:57:6b:f6:08:d7:f9:bf:a0: 2d:d6:82:bd:16:01:31:d1:34:2c:ce:4b:1f:b1:73: f4:44:8f:6e:6d:44:3a:91:f0:6d:63:c9:10:fe:ad: 8b:c3:21:13:46:8f:87:64:29:c9:3e:70:e2:29:1b: 5b:96:4a:95:b1:fb:f1:25:0f:88:06:70:18:9c:25: 97:aa:e3:92:e1:40:62:95:f6:00:36:3e:31:05:ac: a8:c9:83:b4:8a:9d:1a:8b:91:99:33:39:24:6d:63: 64:7a:b6:8d:29:41:aa:ac:56:39:c2:df:81:43:d1: 22:16:22:1a:52:9c:19:7a:ea:3c:c4:b7:5c:2b:f2: de:fc:0d:ea:25:c5:0f:c1:3c:f1:43:b8:c0:7b:45: 9e:ff:37:12:43:17:41:c3:8d:10:5a:3b:1b:e6:5d: ca:02:83:95:0a:27:72:29:f1:25:c4:62:f5:09:84: 0c:d2:8e:5f:e2:8f:6f:5a:4b:e0:cc:4e:36:88:91: 34:34:b4:51:5d:e8:5f:a4:2f:17:fa:2d:65:46:e1: 58:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B6:F9:74:7D:AD:5C:DE:91:3D:6B:29:5C:33:CB:2D:80:96:84:0B X509v3 Authority Key Identifier: keyid:9E:6A:0A:A4:39:CF:E3:47:B0:4F:74:68:40:A6:E4:34:C5:09:B1:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:f8:03:1c:30:28:40:18:81:7f:e0:40:63:2e:c4:93:29:a3: 9c:f5:4d:70:41:04:82:ed:d9:08:29:6e:ee:9c:0a:71:d4:35: e2:df:bd:ce:74:be:e5:70:8c:f7:b1:6b:2e:2b:01:76:38:eb: e7:ea:82:1a:b2:00:62:34:58:b2:68:71:87:f6:48:d0:a6:8c: 1b:83:79:16:ff:5a:43:22:59:28:5b:27:a5:a0:ca:05:11:92: a7:93:34:56:83:40:aa:d5:6b:11:cf:3f:a4:e8:73:1c:09:88: 91:5c:1d:87:b8:6a:49:dd:68:83:43:d2:3a:5f:5e:ab:73:60: af:8e:12:bd:7a:30:83:4b:68:6e:bc:d2:fe:3b:72:de:21:2b: af:c0:73:c5:fb:57:f4:0d:66:1b:b9:31:2d:44:b6:d8:68:92: 8e:42:4a:1b:d6:93:8a:69:cf:9b:fb:79:6b:81:f0:ec:83:e0: a2:ef:65:61:f2:e8:59:3d:4e:3a:b1:ed:e4:cb:34:6d:68:e5: cf:55:10:d4:57:10:04:21:a8:37:c4:1f:60:c9:c0:cb:c5:98: ae:13:bc:dc:9a:52:86:47:c4:56:f2:c6:70:8e:24:42:5e:4e: 7d:75:e7:13:e4:cb:57:1f:8c:86:77:be:32:af:67:22:a8:dd: 2f:52:42:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERDNTYxMTAvBgNVBAUTKDlFNkEwQUE0MzlDRkUzNDdCMDRGNzQ2ODQwQTZFNDM0 QzUwOUIxQTcwHhcNMjUwMjE1MDYwODI1WhcNMjUwMjIyMDYwODI0WjAYMRYwFAYD VQQDEw02N2IwMmY1OS0zZjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzws/xrmSdmR30fI11BZ7QksbJ6geTE9CdbxYOz1b45TPE3RCt3v8sFB2OJgk vhQBLubOV2v2CNf5v6At1oK9FgEx0TQszksfsXP0RI9ubUQ6kfBtY8kQ/q2LwyET Ro+HZCnJPnDiKRtblkqVsfvxJQ+IBnAYnCWXquOS4UBilfYANj4xBayoyYO0ip0a i5GZMzkkbWNkeraNKUGqrFY5wt+BQ9EiFiIaUpwZeuo8xLdcK/Le/A3qJcUPwTzx Q7jAe0We/zcSQxdBw40QWjsb5l3KAoOVCidyKfElxGL1CYQM0o5f4o9vWkvgzE42 iJE0NLRRXehfpC8X+i1lRuFYIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPK2+XR9 rVzekT1rKVwzyy2AloQLMB8GA1UdIwQYMBaAFJ5qCqQ5z+NHsE90aECm5DTFCbGn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REM1Ni9DREJDRjYzQTY2 OTMxMUVFOThDRUFBNTBDNEY5QUUwMi9ubW9LcERuUDQwZXdUM1JvUUtia05NVUpz YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tb0twRG5QNDBld1QzUm9RS2JrTk1VSnNhYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REM1Ni9DREJDRjYzQTY2OTMxMUVFOThDRUFBNTBDNEY5QUUwMi9ubW9LcERuUDQw ZXdUM1JvUUtia05NVUpzYWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCI+AMcMChAGIF/4EBjLsSTKaOc9U1wQQSC7dkIKW7unApx1DXi373O dL7lcIz3sWsuKwF2OOvn6oIasgBiNFiyaHGH9kjQpowbg3kW/1pDIlkoWyeloMoF EZKnkzRWg0Cq1WsRzz+k6HMcCYiRXB2HuGpJ3WiDQ9I6X16rc2CvjhK9ejCDS2hu vNL+O3LeISuvwHPF+1f0DWYbuTEtRLbYaJKOQkob1pOKac+b+3lrgfDsg+Ci72Vh 8uhZPU46se3kyzRtaOXPVRDUVxAEIag3xB9gycDLxZiuE7zcmlKGR8RW8sZwjiRC Xk59decT5MtXH4yGd74yr2ciqN0vUkLF -----END CERTIFICATE-----Generated at Sun Feb 16 20:50:29 2025 by rpki-client